CyberArk CyberArk Certifications PAM-CDE-RECERT Questions & Answers

• Question 161:

  Which report provides a list of account stored in the vault.

  A. Privileged Accounts Inventory

  B. Privileged Accounts Compliance Status

  C. Entitlement Report

  D. Active Log

  Correct Answer: A

• Question 162:

  A new HTML5 Gateway has been deployed in your organization. Where do you configure the PSM to use the HTML5 Gateway?

  A. Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details > Add PSM Gateway

  B. Administration > Options > Privileged Session Management > Add Configured PSM Gateway Servers

  C. Administration > Options > Privileged Session Management > Configured PSM Servers > Add PSM Gateway

  D. Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details

  Correct Answer: B

• Question 163:

  Which statement is correct concerning accounts that are discovered, but cannot be added to the Vault by an automated onboarding rule?

  A. They are added to the Pending Accounts list and can be reviewed and manually uploaded.

  B. They cannot be onboarded to the Password Vault.

  C. They must be uploaded using third party tools.

  D. They are not part of the Discovery Process.

  Correct Answer: D

  Reference:https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/Privilege%20Cloud/privCloud-accounts-discovery.htm

• Question 164:

  A user is receiving the error message "ITATS006E Station is suspended for User jsmith" when attempting to sign into the Password Vault Web Access (PVWA). Which utility would a Vault administrator use to correct this problem?

  A. createcredfile.exe

  B. cavaultmanager.exe

  C. PrivateArk

  D. PVWA

  Correct Answer: C

• Question 165:

  For Digital Vault Cluster in a high availability configuration, how does the cluster determine if a node is down?

  A. The heartbeat s no longer detected on the private network.

  B. The shared storage array is offline.

  C. An alert is generated in the Windows Event log.

  D. The Digital Vault Cluster does not detect a node failure.

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Managing-the-CyberArk-Digital-Cluster-Vault-Server.htm?TocPath=Administration%7CComponents%7CDigital%20Vault%7COperate%2 0the% 20CyberArk%20Vault%7CCyberArk%20High-Availability%20Vault%20Cluster%7C_____1

• Question 166:

  What is the name of the Platform parameters that controls how long a password will stay valid when One Time Passwords are enabled via the Master Policy?

  A. Min Validity Period

  B. Interval

  C. Immediate Interval

  D. Timeout

  Correct Answer: A

  Min Validity Period-The number of minutes to wait from the last retrieval of the password until it is replaced. This gives the user a minimum period to be able to use the password before it is replaced. Use-1 to ignore this property. This parameter is also used to release exclusive accounts automatically Interval ? The number of minutes that the Central Policy Manager waits between running periodic searches for the platform. Note: It is recommended to leave the default value of 1440. If a change/verify policy has been configured, the Central Policy Manager will automatically align the periodic searches with the start of the defined timeframes."

• Question 167:

  Which pre-requisite step must be completed before installing a Vault?

  A. Join the server to the domain

  B. install a clean operating system

  C. install anti-virus software

  D. Copy the master CD to a folder on the Vault server

  Correct Answer: B

• Question 168:

  You have been asked to identify the up or down status of Vault services. Which CyberArk utility can you use to accomplish this task?

  A. Vault Replicator

  B. PAS Reporter

  C. Remote Control Agent

  D. Syslog

  Correct Answer: C

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Remote-Administration-for-the-Vault-DR-Vault.htm?tocpath=Administrator%7CComponents%7CDigital%20Vault%7COperate%20th e% 20CyberArk%20Vault%7CMonitor%20the%20Vault%7C_____1

• Question 169:

  Customers who have the `Access Safe without confirmation' safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 170:

  The vault supports Role Based Access Control.

  A. TRUE

  B. FALSE

  Correct Answer: B

  Reference https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Object-Level-Access-Control.htm